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DEVICE FOR AUTHENTICATING DIGITAL IMAGES 



The present invention relates to a device for 
authenticating digital images. 
5 The invention applies more particularly to the 

authenticating of digital images emanating from a 
picture taking apparatus such as, for example, a camera 
head or a photographic apparatus. 

Digital images are falsifiable images. Thus 
10 are, for example, digital images constituting a news 
report or a television transmission, whether these 
images are broadcast live or from a source of recorded 
data. 

People to whom digital images are sent 
15 therefore find themselves in a situation where the 
authenticity of the information which they receive is 
not guaranteed. This drawback is all the more 
significant with the proliferation of sources of 
information such as, for example, the sources of 
20 information originating from journalists commonly 
referred to as ^^freelance" journalists. To avoid this 
drawback, processes for authenticating digital images 
have been proposed, in particular in the patent 
US 5,499,294. These processes make it possible to 
25 authenticate the picture taking apparatus itself but 
not the journalist or the cameraman. 

The purpose of the invention is to remedy this 
drawback. 

The present invention relates to a device for 
30 authenticating the taking of pictures laade up of 
digital data comprising a picture taking apparatus and 
a security element carrying out the signing of at least 
part of the digital data, characterized in that the 
security element is a detachable element comprising a 
35 decryption circuit with secret key Kl, this element 
being connected to- the picture taking apparatus by an 
interface circuit provided in the picture taking 
apparatus • 
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Other advantages and characteristics of the 
invention will become apparent on .reading a preferred 
embodiment given with reference to the hereto appended 
figures in which: 

- Figure 1 represents a first picture taking 
device allowing the authentication of digital images 
according to the preferred embodiment of the invention; 

- Figure 2 represents a second picture taking 
device allowing the authentication of digital images 
according to the preferred embodiment of the invention; 

- Figure 3 represents, according to the 
invention, a device for authenticating the digital 
images emanating from a picture taking device such as 
that represented in Figure 1 or in Figure 2. 

In all the figures, the same labels designate 
the same elements. 

Figure 1 represents a first picture taking 
device allowing the authentication of digital images 
according to the preferred embodiment of the invention. 

The picture taking device consists of a picture 
taking apparatus 1 and of a detachable security element 
2. The picture taking apparatus 1 can be, for example, 
a camera head or a photographic apparatus. According to 
the preferred embodiment of the invention, the 
detachable security element is a chip card. 

The picture taking apparatus 1 comprises an 
objective 3, a block 4 of circuits for processing the 
signal emanating from the objective 3, a hashing 
circuit 5, a multiplexer 6 and a circuit 7 for 
interfacing with the chip card. 

In a manner known per se, the objective 3 and 
the block 4 of processing circuits make it possible to 
transform a light signal L into a digital signal VN. 

According to the invention, a fraction F1{VN) 
of the digital signal VN is tapped off, preferably in a 
regular manner, at the output of the block 4. Each 
fraction Fl(VN) tapped off is sent to the hashing 
circuit 5. The circuit 5 can be an electronic circuit 
or a software element. By way of nonlimiting examples. 
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the fraction Fl(VN) of the digital signal VN can be 
made up of the even or odd lines of the same image or 
of the data relating to the luminance component of the 
same image. The fraction Fl (VN) can also be made up of 
several frames tapped off at regular time intervals in 
the case of a camera head or image by image in the case 
of a photographic apparatus. In a general manner, the 
datum Fl (VN) is made up of significant data of an 
image. 

The result ml emanating from the function for 
hashing the signal Fl (VN) is sent to the interface 
circuit 7. The datum ml con^rises, for example, a few 
tens of bits. 

The interface circuit 7 allows the 
15 bidirectional transfer of data between the apparatus 1 
and the chip card 2. Preferably, the circuit 7 is a 
bidirectional serial interface circuit to the ISO-7816 
standard. 

The chip card contains a decryption circuit 
(not represented in the figure) as well as a secret key 
Kl. Preferably, the key Kl is stored in a programmable 
memory contained in the card 2. Under the action of the 
key Kl, the successive data ml sent to the card 2 are 
decrypted by the decryption circuit so as to constitute 
5 a string of data D(ml)Ki. Each datum D(ml)Ki constitutes 
the signature of the datum ml and hence of the fraction 
Fl (VN) from which the datum ml emanated. 

By way of the interface circuit 7, the data 
D(ml)Kx are sent from the chip card 2 to a first input 
of the multiplexer 6 which receives, in addition, the 
digital signal VN on a second of its inputs. 

The signal SI emanating from the multiplexer 6 
is then made up of the digital data VN and of the data 
D(ml)Ki. Preferably, each datum D(ml)Ki is inserted into 
a header associated with the fraction of datum Fl (VN) 
which corresponds thereto. According to another 
embodiment of the invention, the data D(ml)Ki are 
substituted for some of the data VN which are then 
lost. 
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Figure 2 represents a second picture taking 
device allowing the authentication of digital images 
according to the preferred embodiment of the invention . 

The picture taking device consists of a picture 
5 taking apparatus 8 and of a detachable security element 
9, for example, a chip card. The apparatus 8 can be, 
for example, a camera head or a photographic apparatus. 
The apparatus 8 contains the same circuits as the 
apparatus 1 described in Figure 1 with the exception of 

10 the hashing circuit 5. 

According to the embodiment of Figure 2, the 
hashing function is carried out in the chip card 9* 
From this it follows that the fraction Fl (VN) of the 
digital signal VN is sent to the chip card 9. 

15 As mentioned hereinabove, the hashing of the 

datum Fl(VN) generates a datum ml which, decrypted, 
generates a datum D(ml)Ki. By way of the interface 
circuit 7 the successive data D{ral)Ki are sent from the 
chip card 9 to the multiplexer 6. The signal SI 

20 emanating from the picture, taking apparatus 8 is then 
generated as mentioned earlier. 

A picture taking device according to the 
invention operates with decryption keys Kl having 
different values. One and the same key Kl can then be 

25 specific to one person or to a set of people 
constituting, for example, a collection of journalists. 
From this it follows that an advantage of the invention 
is that it guarantees the origin of the authenticated 
images. 

30 In accordance with the invention, the chip card 

provides for a personal key function whose key is 
secret. Moreover, the use of a chip card implies the 
implementation of a procedure of mutual identification 
between the chip card and the device receiving the chip 

35 card, namely the picture taking apparatus. From this it 
follows that the security level relating to the various 
steps implemented in the chip card and the picture 
taking device is a high security level. 



Figure 3 represents, according to the 
invention, a device for authenticating digital images 
emanating from a picture taking device such as that 
represented in Figure 1 or in Figure 2 • 

The device 10 for authenticating digital images 
comprises a demultiplexer 11, an encryption circuit 12 
with public key K2, a hashing circuit 13 and a 
comparator 14. The demultiplexer 11 receives on its 
input a signal SI such as that mentioned in Figures 1 
and 2. The signal SI originates either from a picture 
taking device such as that described in Figures 1 and 
2, or from a source of recorded data such as, for 
example, a magnetic tape, a digital video disc or else 
a diskette. 

The function of the demultiplexer 11 is to 
separate the data D(ml)Ki from the digital data VN. The 
data D(ml)Ki are sent to the encryption circuit 12 with 
public key K2 . 

The operation of encryption with public key K2 
of a datum D(ml)Ki leads . to the calculation of an 
encrypted datum C (D (ml ) ki) k2 • 

According to the invention, fractions F2 (VN) of 
the digital signal VN are tapped off at the output of 
the demultiplexer 11. The tapping off of the fractions 
F2(VN) is performed as a mirror image of the tapping 
off of the fractions Fl (VN) . Thus, each fraction F2 (VN) 
corresponds to a fraction Fl(VN) and the data which are 
contained in the fraction F2(VN) which corresponds to 
the fraction Fl (VN) are data of the same type as the 
data contained in the fraction Fl(VN). The expression 
**data of the same type'' should be understood to mean 
that the data which constitute the fraction F2 (VN) are 
data which are a priori identical to the data which 
constitute the fraction Fl(VN) which corresponds 
thereto: the data are identical if the fraction Fl(VN) 
has not been falsified and different, in whole or in 
part, if the fraction Fl(VN) has been falsified. 

In all cases, the data contained in a fraction 
F2(VN) represent the same signal as the data contained 




in the fraction Fl(VN) corresponding thereto. Thus, for 
example, if the data contained in a fraction Fl(VN) are 
made up of the even lines of an image, the data 
contained in the fraction F2{VN) which corresponds to 
5 the fraction Fl(VN) are made up of the even lines of 
the same image. 

The circuit 13 operates the hashing of the data 
contained in the fractions F2{VN). The hashing 
operation performed by the circuit 13 is identical to 

10 that performed by the circuit 5. From this it follows 
that the datum m2 which is associated with a fraction 
F2(VN) corresponding to a fraction Fl(VN) is identical 
to the datiim ml which is associated with the fraction 
Fl(VN) if the fraction Fl (VN) has not been falsified. 

15 The datum m2 emanating from the circuit 13 and the 
datum C(D(ml)Ki)K2 are sent to the comparator 14. 

The signal S3 emanating from the comparator 14 
then makes it possible to indicate whether the digital 
data VN are authentic data or falsified data: these are 

20 data which can be regarded, as authentic if each datum 
m2 is equal to the datum C(D(ml)Ki)K2 corresponding 
thereto, these are data where one is aware that they 
have been falsified if at least one datum m2 is 
different from the datum C(D(ml)Ki)K2 corresponding 

25 thereto. 

According to the invention, the device 10 for 
authenticating images can be incorporated into a 
control unit receiving images filmed by a camera head. 



